Skip to main content
cve.nowby Sazabi
← npm
npmPackage

send

3 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium
Registry
npm

Advisories 3

  • CVE-2024-43799Medium 5.0

    send vulnerable to template injection that can lead to XSS

    Affected: fixed in 0.19.0.

  • The send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.

    Affected: fixed in 0.11.1.

  • visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which…

    Affected: fixed in 0.8.4.